Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: 2zyMzz2BcKTo49BavH5ZlB8UEJAr4M71BcCaNpiDK9o=
Subject key identifier: 37:A7:13:38:20:93:46:0A:4C:E7:FA:D0:ED:82:34:2A:13:9A:F5:D6
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 019D299732639EDE12AA228C3A937C7E4515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 149D
Signing time: Thu 26 Mar 2026 10:01:07 +0000
Manifest this update: Thu 26 Mar 2026 10:01:07 +0000
Manifest next update: Fri 27 Mar 2026 10:01:07 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: Qzpwdd088tiyNOLMESppSKnvcSOycib4mAC6CP0TioY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:32:63:9e:de:12:aa:22:8c:3a:93:7c:7e:45:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Mar 26 10:01:07 2026 GMT
Not After : Mar 27 10:01:07 2026 GMT
Subject: CN=37a713382093460a4ce7fad0ed82342a139af5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:f5:77:0c:8e:ac:8e:e8:f8:90:eb:da:c9:
13:e1:c5:e6:64:68:eb:98:6b:2e:84:9a:17:55:e7:
24:c5:13:99:9a:2a:cf:f3:a3:1d:f7:bd:5b:5d:e5:
02:c1:94:b8:e8:dd:92:f5:13:ad:55:a8:02:d6:68:
d3:40:b4:f0:ab:75:dd:d5:a4:4d:d5:c9:a9:15:88:
ae:4c:2b:02:6a:e8:ac:af:e1:24:da:93:a1:2c:e6:
3c:c8:bf:49:dd:4c:b4:2f:5d:e4:ee:eb:e7:5a:13:
b6:0c:66:4d:66:4e:28:2e:89:5b:75:a1:1e:bd:f6:
6b:13:ed:e7:88:27:ea:f5:b5:87:29:ae:80:3a:da:
53:e6:5d:d6:a7:12:85:e7:5f:05:28:5c:ca:0c:e2:
13:f2:2f:b4:7a:1c:80:ce:c1:2f:1e:a3:0f:60:d7:
db:c5:e9:53:8c:18:30:f4:b0:b7:fe:b2:f5:db:50:
d4:08:50:62:e0:80:85:92:ee:a5:59:f9:77:16:e4:
4d:70:84:0b:6b:f1:37:98:b4:63:11:a3:26:c3:14:
fa:d1:c7:00:42:7e:25:ab:d8:23:2b:8f:62:20:f1:
d0:c5:7e:3d:95:06:84:9a:ac:6c:55:83:04:de:6c:
2b:a4:fc:6c:a7:e2:1c:df:ba:ba:92:69:bf:9d:6b:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A7:13:38:20:93:46:0A:4C:E7:FA:D0:ED:82:34:2A:13:9A:F5:D6
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:df:83:c7:7e:b2:77:c0:54:cb:ea:77:02:19:42:36:7b:ec:
5f:25:60:31:1d:7a:1a:86:8a:81:ff:44:ec:ca:fd:82:a2:29:
66:2d:ca:e7:b2:d6:7c:52:15:3a:8a:38:f7:30:14:0a:3f:ca:
f8:7e:86:d0:4f:17:a3:f2:98:cf:a3:d3:7f:da:cc:49:e7:6b:
9d:29:d0:22:ee:f4:b9:42:d9:79:bd:d3:2f:e2:38:84:b2:e8:
12:4b:f0:b8:cb:15:a6:a2:b5:bd:0c:43:03:de:ce:24:52:2f:
f9:b0:f1:13:bf:b6:5c:b6:d6:f2:a4:27:16:25:bc:9d:eb:45:
d9:bd:ce:8d:49:c3:a6:5e:ed:14:f0:02:91:0c:cc:05:16:7a:
bd:1d:47:cf:e1:9c:1f:14:64:eb:8c:f6:7d:d9:47:39:a3:ed:
6b:d5:5e:22:00:80:7b:a7:67:95:38:63:63:67:34:98:9a:77:
5b:96:a7:d9:59:34:ca:03:3e:8b:c2:9e:65:59:e8:1e:fd:e0:
bd:4f:a4:d1:bc:ed:3c:7e:ec:d2:39:a6:5c:4e:58:06:f3:a8:
e6:28:b3:d4:0b:bd:d1:e6:be:09:b7:f3:3e:34:d9:03:b8:cd:
06:72:14:10:24:47:8c:b9:b9:29:e3:66:82:d3:c9:36:1f:4d:
52:3c:6d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:20 2026 by rpki-client